This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json) Hash identifier: wVecYSM6QF5AcswgcoxjwSgiD5hazGYnQgcZPhuS9D8= Subject key identifier: 5A:0B:82:9D:4E:30:D9:45:81:CD:FF:00:D1:01:11:16:19:00:E1:F3 Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Certificate serial: 019B5072BA9F00D88D114D3903556DBD5F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft Manifest number: 0A89 Signing time: Wed 24 Dec 2025 13:00:54 +0000 Manifest this update: Wed 24 Dec 2025 13:00:54 +0000 Manifest next update: Thu 25 Dec 2025 13:00:54 +0000 Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=) 2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: tiRIUw8XKw+sqj2zBynGF3rsfweNQ0Zw/TBh/LtyMRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:ba:9f:00:d8:8d:11:4d:39:03:55:6d:bd:5f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Validity Not Before: Dec 24 13:00:54 2025 GMT Not After : Dec 25 13:00:54 2025 GMT Subject: CN=5a0b829d4e30d94581cdff00d10111161900e1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:ec:d2:5c:e0:e0:d3:08:74:3a:20:9d:64: 95:8f:ee:80:d2:a3:0d:8a:e4:85:e1:1e:3c:72:f5: b8:63:d0:7d:75:17:f9:3b:a0:54:eb:98:d8:22:2b: ae:21:cb:8d:9d:d8:12:37:58:79:a0:55:94:e1:cc: bc:94:00:78:05:f1:cf:4a:8d:37:e6:ac:16:85:b3: f2:2d:28:48:b4:02:be:04:ca:49:a9:68:e7:ae:ff: d1:e6:2b:67:46:e9:9e:a6:b9:cd:56:8f:e4:f2:78: 44:99:08:fa:c2:3f:8f:75:51:ad:66:d0:19:15:6a: 14:54:7c:7c:af:40:5f:0e:92:29:aa:ab:ad:04:f9: d5:2e:b4:9d:fa:b3:b0:61:24:ff:68:8f:54:ce:96: d2:61:71:04:dc:65:fc:3a:76:73:2e:cf:fd:e3:2a: 3a:67:1b:a0:35:9f:1a:47:cc:2c:0f:24:c5:1c:e5: e0:8b:c2:e5:0d:ad:a1:45:e0:2a:76:53:de:16:16: 75:5f:9a:d8:be:ec:a9:97:ba:eb:d0:bc:8d:f5:64: 81:3c:75:64:08:06:ff:04:32:a9:ca:2f:d9:f0:3a: c3:f8:2c:5b:80:10:cc:5d:b7:20:95:af:bb:2d:a0: aa:95:0f:c9:c9:f3:90:ba:be:b5:f5:71:ed:58:12: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0B:82:9D:4E:30:D9:45:81:CD:FF:00:D1:01:11:16:19:00:E1:F3 X509v3 Authority Key Identifier: keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:be:20:67:c3:f8:8f:5b:ee:d6:3f:bd:32:ee:2b:26:53:f7: d7:c6:fd:2b:c8:db:4a:90:5c:4e:b7:f3:85:d3:10:8f:5b:1c: 6a:3a:98:fb:17:49:0c:4f:70:aa:70:d2:96:4a:9c:aa:fc:3d: a2:3d:1c:98:b8:1e:ed:0a:0a:b1:52:3e:7e:00:e1:b8:a3:50: b4:f6:b9:72:2c:3e:0a:a6:41:e1:83:4e:eb:d8:03:d2:f2:31: c7:fb:18:42:a3:bb:24:9f:d0:27:88:4d:ec:89:9a:7e:51:a9: ab:6a:ba:fa:55:8d:06:89:ef:ef:f6:5b:be:12:c2:4f:10:1b: da:ec:fe:c3:6a:a8:7b:0e:a8:60:28:3f:af:38:48:db:46:e5: 9c:6b:56:23:43:a2:99:af:87:bf:11:c7:73:16:05:77:8e:95: 68:31:b5:83:10:7d:bd:0a:a1:f7:eb:3b:99:69:54:23:e2:d6: 41:42:a5:39:20:73:f9:fe:36:c9:1c:05:9c:75:e4:86:a0:88: b8:26:d9:bd:12:cf:46:23:0c:b5:9c:b1:1e:6d:63:2e:ec:86: 99:5b:45:7f:fa:91:ab:c1:5b:cc:c6:9c:0b:6e:fc:9a:be:60: 32:3d:89:18:e1:f6:50:25:ac:66:12:b9:68:66:05:42:5f:7e: f9:43:7f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcrqfANiNEU05A1VtvV9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj ZjEzODYwHhcNMjUxMjI0MTMwMDU0WhcNMjUxMjI1MTMwMDU0WjAzMTEwLwYDVQQD Eyg1YTBiODI5ZDRlMzBkOTQ1ODFjZGZmMDBkMTAxMTExNjE5MDBlMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAHs0lzg4NMIdDognWSVj+6A0qMN iuSF4R48cvW4Y9B9dRf5O6BU65jYIiuuIcuNndgSN1h5oFWU4cy8lAB4BfHPSo03 5qwWhbPyLShItAK+BMpJqWjnrv/R5itnRumeprnNVo/k8nhEmQj6wj+PdVGtZtAZ FWoUVHx8r0BfDpIpqqutBPnVLrSd+rOwYST/aI9UzpbSYXEE3GX8OnZzLs/94yo6 ZxugNZ8aR8wsDyTFHOXgi8LlDa2hReAqdlPeFhZ1X5rYvuypl7rr0LyN9WSBPHVk CAb/BDKpyi/Z8DrD+CxbgBDMXbcgla+7LaCqlQ/JyfOQur619XHtWBLMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoLgp1OMNlFgc3/ANEBERYZAOHzMB8GA1UdIwQY MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt OWE2ZWU0ODZlZmY3LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3 LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy74gZ8P4 j1vu1j+9Mu4rJlP318b9K8jbSpBcTrfzhdMQj1scajqY+xdJDE9wqnDSlkqcqvw9 oj0cmLge7QoKsVI+fgDhuKNQtPa5ciw+CqZB4YNO69gD0vIxx/sYQqO7JJ/QJ4hN 7ImaflGpq2q6+lWNBonv7/ZbvhLCTxAb2uz+w2qoew6oYCg/rzhI20blnGtWI0Oi ma+HvxHHcxYFd46VaDG1gxB9vQqh9+s7mWlUI+LWQUKlOSBz+f42yRwFnHXkhqCI uCbZvRLPRiMMtZyxHm1jLuyGmVtFf/qRq8FbzMacC278mr5gMj2JGOH2UCWsZhK5 aGYFQl9++UN/3A== -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:58 2025 by rpki-client